Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
AskSQLTeam
Ask SQLTeam Question
0 Posts |
 Posted - 2004-09-21 : 08:40:30
|
| Ken writes "I'm new to SQL server.I have been asked to create an environment where the Windows Administrator is prevented from doing anything on the SQL server other than backups. We run SQL Server in Mixed Mode Authentication which allows us to create users that utilize Windows Authentication. I created a Windows user and assigned him to the following SQL Server roles:db_backupoperator db_denydatareader db_datawriter This windows user was not an administrator. Everything worked just fine. But I'm not able to do the same thing with the Administrator User on Windows 2000. I understand that the Adinistrator User has default privs on SQL server that allow the windows admin to do almost anything on SQL server. Is there any way to alter SQL Server to not allow the Windows Administrator User full access?" |
|
|
derrickleggett
Pointy Haired Yak DBA
4184 Posts |
Posted - 2004-09-21 : 08:52:05
|
| Remove the BUILTIN/Administrator login from SQL Server. Before you do this, make absolutely sure you've created another user with system administrator rights. Otherwise, you'll be in for a fun time.MeanOldDBAderrickleggett@hotmail.comWhen life gives you a lemon, fire the DBA. |
 |
|
|
|
|
|
SQL Server Mix Mode authentication